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A tamper evident wireless 
including stored thereorp 
certrficate, wherein the 
relating to said key pa 
private key. 
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application protocol identity module (WIM) 
a public-private key pair and a manufacturer 
certificate contains a set of fields holding data 
r, the certificate being signed using a further 



A module as claimed in 
field of said certificate, 

A module as claimed 
certification authority ce 



A h^odule as claimed in 
certificate is stored externally 
is derivkble from an 




A module ^ claimed 
private key is me manu 

A module as claimed 
private key is an li^itia 
stored thereon an 
manufacturer's private 



A method of 
protocol identity moduli 
private key pair on said 
signed using a further 




Claim 1 , wherein the public key Is held within a 



in Claim 1 or Claim 2, further including a 
iifioate. 



any preceding Claim, wherein the at least one 
of said module at a remote location which 
stored on said module. 



in any preceding Claim, wherein the further 
acturer's private key. 

any one of Claims 1 to 4, wherein the further 
management key, the module further having 
iai management certificate signed using the 
ey. 



manufattuf^g a tamper-evident wireless application 
(WrM) including the steps^of storing a public- 
moduleslog^ther with a manufacturer certificate 
drivate key^ 
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A method according 
externally of said modille 
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to Claim 7, wherein the key pair is created 



A method according 
intemally of said modu 



to Claim 7, wherein the key pair is created 
e. 



A method according 
certificate is created e: 



to 



Claim 8 or Claim 9. wherein the manufacturer 
Djtemally of the module. 



method according tc 
m^^ule is accessed tcb 
creOTpn of the certificate 



5 12. A method\as claimed 
private key i^the 



A method as cliaimec 
storing an extemalty t 



management certificate 
said module, and stor 



on said module whe 
management private kfey 



A method of validating 
identity module (WIM) 
pair together with a 
private key, the methob 
to obtain a public key 
generated by the furth 



Claim 10 as appendant to Claim 9, wherein the 
obtain the public key to facilitate the extemal 



in 



any one of Claims 7 to 11, wherein the further 
maniifacturer's private key. 



in Claim 9, Including the additional steps of 
cl^eated initial management key pair and an initial 
signed using the manufacturer's private key on 
g an intemally created manufacturer certificate 
in the further private key is the initial 



a tariSper-evldent wireless application protocol 
on whichNis stored at least one public-private key 
manufacturer certificate signed using a further 
including th\^step of querying a public directory 
certificate with which to verify the signature 
er private key. 
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A method of validating 
conducting transactioi is 

ientity of a user of the 
thV terminal to obtain 
the terminal, confirmir^ 
moduldymanufacturer 
issuing avfurther 
available toVupport tr£ 



cer ificate 



A method as claimed i 
carries out the 
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Claim 15, wherein the network service provider 
authentication of the manufacturer certificate. 



A communications 
certificates supporting 
non-repudiation, and 
on a tamper evident 
contains a set of field 
for application layer 
said module, the 
private key. 



A device as claimed 
supporting security 
remote location which 
device. 



A method of satisfyinb 
an identity module for 
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the identity of a communication terminal for 
on a network comprising establishing the 
terminal connected to the network, interrogating 
public key of a public-private key pair stored on 
the authenticity of a certificate signed by the 
supporting the public key and subsequently 
for the public key which certificate is 
nsactions with the terminal over the networi^. 



cjevice having stored thereon a plurality of 
security operations including authentication and 
f^jrther including a manufacturer certificate stored 
module, wherein the manufacturer certificate 
holding data relating to a public-private key pair 
security, at least the private key being stored on 
marjufacturer certificate being signed using a further 



in Claim 17. wherein at least one certificate 
of|)erations is stored externally of said device at a 
is derivable from an address stored on said 



an identity module issuer of the provenance of 
use in transactions on a network comprises the 
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issuer approving a manufacturing process of the module manufacturer;,^ 
ind having the manufeicturer store a manufacturer certificate signed 
securely by the manufacturer on a module produced in accordance 
wftK the approved proc(JSS, wherein on connection to the network of a 
termmal containing a module, the signature is verified to determine 
whether it is the manufs cturer's. 



A method as claimed in 
is signed u^ing the 
to the netwo>;l< a public 
signature. 



Claim 19, wherein the manufacturer certificate 
manufacturer's private key such that on connection 
key certificate is obtained with which verify the 



A method as claim^ ir 



Claim 19 or Claim 20, wherein the verification 
of the signature is cdrridd out by the issuer, 



A method as claimed irfvany one of Claims 19 to 21, wherein following 
successful verification 
made available to suppbrt 

having been stored in t^e hrianufacturer certificate 



C)f^^ signature, a fijrther public key certificate is 
"ransactions with the terminal, the public key 
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